General Data Protection Regulation
What is the GDPR?
From 25 May 2018, the General Data Protection Regulation (GDPR) applies in all member states of the European Union, including Bulgaria. It replaces the EU Data Protection Directive, which had been in force since 1995.
The aim of the GDPR is to harmonise and modernise EU member states' policies on the collection, storage and use of personal data. The Regulation guarantees the right to privacy and to the protection of personal data. You will find more details in the official document (in Bulgarian) published by the Commission for Personal Data Protection (CPDP).
What control does the GDPR give you?
The GDPR gives EU citizens full control over the data they provide to companies, whatever their activity or size. Every citizen has the right to decide what happens to the personal data they have provided to any company. This includes requesting a copy of their personal information, having all their data exported, or having all their information deleted by the company.
What are the main requirements of the GDPR?
The GDPR requires every organisation to answer the following questions: what personal data it uses; why it processes that data; how long it will keep the data, or what criteria determine the retention period; who the data will be shared with; and whether the personal data will be transferred outside the EU. The GDPR also requires organisations to obtain the consent of EU citizens before providing their data to third parties, and to guarantee the right to request or correct their data, to have it deleted, and "to be forgotten".
Molivnik and the GDPR
Since it was first built, the Molivnik website has complied with the requirements of the data protection regulation. As a personal data controller, Molivnik has appointed an officer responsible for ensuring that personal data is handled carefully and that the process complies with the GDPR.
Everyone with access to the data (both existing and newly appointed staff) receives special training fully aligned with the requirements of the GDPR.
Molivnik carries out a detailed audit of all current and potential partners and familiarises itself in detail with their data protection and conduct under the GDPR. Molivnik provides information to only one supplier, which is located in the EU and holds the necessary security certifications.
Protecting the personal data of the visitors to our site and of Molivnik's clients is one of our highest priorities, and we continuously work on improving our systems and our protection.
What personal data does Molivnik use?
Under the GDPR, personal data is any data that can be used to identify a user. Molivnik uses personal data such as email address, names, mobile phone number and IP address.
Molivnik also uses standard web technologies to identify visitors and track their behaviour, most commonly so-called cookies. You will find more information about them in our cookie policy.
Why do we process the data?
Personal data collected through cookies is used to optimise users' potential future visits to Molivnik. Information collected through the contact forms or subsequent correspondence is used to establish and maintain communication with future clients and partners.
Where do we store the data?
The data stored by Molivnik is physically kept on servers located in data centres within the EU. The information is encrypted to protect it and to restrict access by potential third parties. Personal data is not transferred outside the EU.
How long do we keep the data?
Data is kept for as long as we have grounds for storing it.
How can you manage your data?
Molivnik guarantees its visitors the ability to exercise their rights under the GDPR. Every natural person who is a visitor or client of Molivnik can access their personal information held in our databases. Every natural person can also exercise their right "to be forgotten". Contact us directly for more information here.
Every visitor can also control how cookies behave on our site. You will find more information in our Cookie Policy.